Hi, the fix works for us and the group gets now verified and checked just fine for members with NON-ASCII Characters in their name. Thanks again, Mischa -- Mischa Diehm | Network Operations Center (NOC) UniBasel | UniRechenZentrum (URZ) Klingebergstr. 70 | CH-4056 Basel Tel. +41 61 267 1574 | http://urz.unibas.ch From: Morten Brekkevold <morten.brekkevold@uninett.no> Date: Donnerstag, 3. April 2014 10:07 To: Mischa Diehm <mischa.diehm@unibas.ch> Cc: "nav-users@uninett.no" <nav-users@uninett.no> Subject: Re: NAV authentication with LDAP + MS AD
On Wed, 2 Apr 2014 16:12:41 +0000 Mischa Diehm <mischa.diehm@unibas.ch> wrote:
I pulled the fix from:
https://nav.uninett.no/hg/stable/rev/23d774154094
this makes the login with wrong credentials work (before we had an error) but in case of good credentials the system still crashes. Debug output below:
[snip]
File "/usr/lib/pymodules/python2.7/nav/web/ldapauth.py", line 280, in is_group_member result = self.ldap.search_s(group_dn, ldap.SCOPE_BASE, filterstr) [snip] UnicodeEncodeError: 'ascii' codec can't encode character u'\xfc' in position 26: ordinal not in range(128)
This actually looks like the same kind of encoding problem while verifying your group memberships.
Unicode is hard *sigh*.
I posted this as https://bugs.launchpad.net/nav/+bug/1301794 and will be pushing a patch within a few minutes. Attempting, for once, due diligence, I also wrote a regression test for the problem :)
-- Morten Brekkevold UNINETT